Skip to content
Redhat Enterprise Linux vulnerabilities
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via race condition in autofs responder
CVE-2026-104045
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via incomplete identity provider authentication requests
CVE-2026-104046
6.2 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
CVE-2026-104048
6.8 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: information disclosure via query injection in entra id lookups
CVE-2026-104047
5.3 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
CVE-2026-88252
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
CVE-2026-104039
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
CVE-2026-104032
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via memory exhaustion in autofs responder
CVE-2026-104031
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read in autofs responder
CVE-2026-104029
3.3 Low
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
CVE-2026-104030
5.5 Medium
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
CVE-2026-102560
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
CVE-2026-102559
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
CVE-2026-102558
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 more
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
CVE-2026-102555
Fix available
8.2 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
CVE-2026-102557
Fix available
8.6 High
-
gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
CVE-2026-102556
Fix available
8.6 High
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
CVE-2026-90462
5.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
CVE-2026-90996
4.0 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: local denial of service due to null pointer dereference in pam responder
CVE-2026-90995
5.5 Medium
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
CVE-2026-71224
Fix available
4.7 Medium
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
CVE-2026-71222
Fix available
5.3 Medium
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
CVE-2026-71221
Fix available
7.0 High
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
CVE-2026-71220
Fix available
7.0 High
-
red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more
Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
CVE-2026-71219
Fix available
4.7 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling
CVE-2026-82343
Fix available
6.1 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check
CVE-2026-82330
Fix available
6.1 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count
CVE-2026-82328
Fix available
6.1 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0
CVE-2026-82324
Fix available
6.1 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
CVE-2026-80101
Fix available
4.4 Medium
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader
CVE-2026-78475
Fix available
6.1 Medium
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
CVE-2026-11861
9.6 Critical
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read
CVE-2026-73198
7.5 High
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore
CVE-2026-13097
8.7 High
-
freeipa, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more
Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding
CVE-2026-73196
4.3 Medium
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read
CVE-2026-73197
7.5 High
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 more
Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
CVE-2026-19617
Fix available
5.5 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling
CVE-2026-73584
6.3 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr
CVE-2026-73583
6.6 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more
Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
CVE-2026-73585
6.3 Medium
-
red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 more
Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing
CVE-2026-18728
Fix available
6.5 Medium
-
red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 more
Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing
CVE-2026-18727
Fix available
6.5 Medium
-
red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 more
Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing
CVE-2026-18726
Fix available
6.5 Medium
-
rsyslog, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 more
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
CVE-2026-19654
Fix available
7.5 High
-
gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 more
Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write
CVE-2026-73433
Fix available
6.6 Medium
-
gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 more
Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
CVE-2026-73434
Fix available
6.1 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 more
Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing
CVE-2026-19548
Fix available
5.5 Medium
-
freeipa, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more
Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes
CVE-2026-19550
8.2 High
-
gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more
Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file
CVE-2026-59091
Fix available
7.3 High
-
gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 more
Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow
CVE-2026-59090
Fix available
8.4 High
-
red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 more
Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)
CVE-2026-42170
Fix available
7.8 High
- Show olderLoading…